This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/9kNky4pcj3xHQFrNlj4EXWWXNYE.roa File: 9kNky4pcj3xHQFrNlj4EXWWXNYE.roa (raw, json) Hash identifier: 5bt5B/6bGUNfOiBSx92A1iWbyQlAePlq9P2AyJlPndY= Subject key identifier: F6:43:64:CB:8A:5C:8F:7C:47:40:5A:CD:96:3E:04:5D:65:97:35:81 Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf Certificate serial: 019B7C1186AB602C45B6DAADA204B649FD26 Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/9kNky4pcj3xHQFrNlj4EXWWXNYE.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13054 IP address blocks: 193.101.168.0/21 maxlen: 21 193.101.168.0/22 maxlen: 22 193.101.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:86:ab:60:2c:45:b6:da:ad:a2:04:b6:49:fd:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f64364cb8a5c8f7c47405acd963e045d65973581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:24:2c:ad:dd:a3:b5:47:48:07:78:0a:03: 03:9e:9a:67:12:3c:a2:a5:09:3e:5a:17:31:fa:70: 4c:79:a0:b9:24:1c:fe:a8:18:81:ea:7d:47:59:27: 2f:54:f2:d2:86:bb:54:0c:be:3f:af:aa:aa:9b:ea: 91:a8:2d:58:90:27:bc:4a:f0:fb:ef:ae:63:a0:8c: 4e:9d:5a:16:50:0a:e7:c7:49:ae:62:d3:fe:2c:ba: 72:df:24:a6:c8:97:35:ae:c4:34:12:2d:03:f3:a5: 27:0a:32:96:72:44:72:07:f4:f3:d6:df:26:ea:d4: 1a:02:1f:4b:2b:e7:2a:cc:00:e9:1f:d7:cd:65:d3: 96:67:77:f1:9d:4e:21:c5:2e:1a:b8:5a:67:b8:f7: 08:ed:57:23:32:7f:85:23:73:80:d5:ca:62:64:08: 36:a2:75:a4:22:a5:28:77:ea:6e:14:18:3d:b6:c1: 9b:a1:4f:4a:5d:68:4f:ba:8e:e4:ef:ce:f2:d8:22: f2:1c:4d:39:3b:45:d6:07:9c:4f:ca:2d:eb:72:b3: 2b:75:b6:3a:14:9a:fc:3f:f5:7d:7d:da:43:87:27: 2c:4e:44:a3:a0:52:0a:ea:4c:76:32:96:0b:9e:14: 3d:fa:0e:c2:5b:dd:bb:48:4a:49:e2:f8:10:20:f1: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:43:64:CB:8A:5C:8F:7C:47:40:5A:CD:96:3E:04:5D:65:97:35:81 X509v3 Authority Key Identifier: keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/9kNky4pcj3xHQFrNlj4EXWWXNYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.168.0/21 Signature Algorithm: sha256WithRSAEncryption 75:13:95:b0:a1:0f:4b:91:c7:1b:4a:12:3b:b7:4e:bc:ad:39: b3:bd:69:95:89:38:54:2b:38:98:98:10:b8:bb:41:68:64:1e: f9:9f:22:55:2d:32:88:c9:f8:e4:6d:cf:86:77:d9:c9:32:a9: 9f:3d:d2:08:6b:2b:fb:41:5b:49:9e:55:f6:7e:b1:29:e9:57: 72:a0:77:ef:8b:a2:0b:38:b6:63:48:ec:49:44:52:98:16:53: fc:1c:21:ce:fe:2d:8e:04:e4:64:3e:f8:1b:b0:69:7e:4a:11: 5b:9c:80:fb:b1:31:a6:d5:6c:55:58:13:f3:12:4d:b9:cc:6d: a2:ad:91:43:cc:57:05:c0:5c:91:80:06:40:60:56:38:08:6f: 33:e4:b4:81:a2:3f:5f:61:8b:15:6f:0c:63:0e:c0:b2:df:5e: bc:15:2b:b1:70:90:6d:e6:00:36:c7:f6:0d:13:bd:c1:4a:81: 67:ff:88:06:cf:7c:06:dd:27:40:9a:ed:3c:84:48:f3:0f:9b: 34:14:f0:6c:2c:36:95:68:f1:14:92:d0:34:5f:af:e2:f7:85: 85:0d:9c:24:88:6e:f6:b0:0d:1b:e7:2b:50:c9:a4:23:5c:ad: 03:41:4d:55:c8:bb:6d:f5:82:b5:30:04:80:97:2b:f2:aa:53: bb:8e:05:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYarYCxFttqtogS2Sf0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk ODQ3Y2YwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQzNjRjYjhhNWM4ZjdjNDc0MDVhY2Q5NjNlMDQ1ZDY1OTczNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTskLK3do7VHSAd4CgMDnppnEjyi pQk+Whcx+nBMeaC5JBz+qBiB6n1HWScvVPLShrtUDL4/r6qqm+qRqC1YkCe8SvD7 765joIxOnVoWUArnx0muYtP+LLpy3ySmyJc1rsQ0Ei0D86UnCjKWckRyB/Tz1t8m 6tQaAh9LK+cqzADpH9fNZdOWZ3fxnU4hxS4auFpnuPcI7VcjMn+FI3OA1cpiZAg2 onWkIqUod+puFBg9tsGboU9KXWhPuo7k787y2CLyHE05O0XWB5xPyi3rcrMrdbY6 FJr8P/V9fdpDhycsTkSjoFIK6kx2MpYLnhQ9+g7CW927SEpJ4vgQIPGXwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZDZMuKXI98R0BazZY+BF1llzWBMB8GA1UdIwQY MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt YzRkOWJlMTM3ZWVhLzEvOWtOa3k0cGNqM3hIUUZyTmxqNEVYV1dYTllFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwWWoMA0G CSqGSIb3DQEBCwUAA4IBAQB1E5WwoQ9LkccbShI7t068rTmzvWmViThUKziYmBC4 u0FoZB75nyJVLTKIyfjkbc+Gd9nJMqmfPdIIayv7QVtJnlX2frEp6VdyoHfvi6IL OLZjSOxJRFKYFlP8HCHO/i2OBORkPvgbsGl+ShFbnID7sTGm1WxVWBPzEk25zG2i rZFDzFcFwFyRgAZAYFY4CG8z5LSBoj9fYYsVbwxjDsCy3168FSuxcJBt5gA2x/YN E73BSoFn/4gGz3wG3SdAmu08hEjzD5s0FPBsLDaVaPEUktA0X6/i94WFDZwkiG72 sA0b5ytQyaQjXK0DQU1VyLtt9YK1MASAlyvyqlO7jgW9 -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:05 2026 by rpki-client